Newsletter Archives

• Third party add ins reminder

  Posted on March 26, 2025 at 06:00 CDT by Susan Bradley • Comment in the Forums

  One of the things that I plan to start adding as a reminder to my patching checklist/to-dos is to check your add-ins. From browser add ins to operating add-ins, all of these third-party tools mean you no longer have a bog-standard operating system and thus will always be needing to be a bit more careful before updating. Depending on what third party tool you are using make sure you check its version against whatever is the latest version on the site you originally downloaded it from.

  This is one of the reasons I stick with a limited number of add-ins and then get the ones that will check for updates. For example, I’m a fan of Fences that help you corral your icons on your desktop.

  Bottom line: don’t forget to update those first and THEN, update your operating system.

  Windows Patches/Security Patch Lady Posts

• Should all BIOS be updated?

  Posted on February 27, 2025 at 03:00 CST by Susan Bradley • Comment in the Forums

  This is a follow-up to my Patch Watch column on Monday. Should you update all computer systems and search out a new BIOS? In a word: No.

  If you are running Windows 10 on an older computer that will not support Windows 11 or you do not plan to upgrade to Windows 11, and your computer is running just fine, I see no reason to upgrade the BIOS.  My advice to seek out and upgrade your BIOS is only for those running Windows 11 23H2 who will be looking to go to 24H2 or are already there.

  Updating your BIOS isn’t quite as scary as it used to be, but when you have a functional system that you do not plan on upgrading, I don’t see a reason to. Do you?

  Windows Patches/Security Patch Lady Posts, Windows 10, Windows 11, Windows 11 24H2, Windows patches

• February 2025 updates are upon us

  Posted on February 11, 2025 at 12:10 CST by Susan Bradley • Comment in the Forums

  Nine months and counting befor the end of support (but not end of using) Windows 10. We also have a zero day that Apple released yesterday. The updates include the following:

  iOS 18.3.1 fixing a zero day CVE-2025-24200 used in extremely sophisticated attacks. So if you’ve seen headlines about massive risk, actually no, only if you are a CEO or someone high up in an organization.

  For Windows 10 22H2, it’s KB5051974 – note the event ID issue with the System Guard runtime monitor service is not fixed with this release.

  Windows 11 24H2 – KB5051987 – which I’m still not recommending 24H2 unless you’ve bought a machine with it or you’ve already upgraded and see no issues – has been released.

  For Windows 11 23H2 look for KB5051989. Remember at this time we are in test mode only.

  Microsoft indicates that the February updates include a fix for the following:

  After installing the January 2025 Windows security update released January 14, 2025 (the Originating KBs listed above), you might experience issues with USB audio devices. You are more likely to experience this issue if you are using a USB 1.0 audio driver based DAC (Digital to Analog converter) in your audio setup. This issue might cause USB audio devices to stop working, preventing audio playback.

  Windows Patches/Security CVE-2025-24200, Patch Lady Posts

• Previews are previews

  Posted on January 30, 2025 at 03:01 CST by Susan Bradley • Comment in the Forums

  If you have set your machine to Get the latest updates when they are available in the Windows update settings, congratulations on being a beta tester. These updates are the preview updates of the nonsecurity changes that Microsoft releases in the “D” week, better known as the fourth week of the month. They will be included in the security releases installed next month.

  Given my reluctance to be on the cutting/bleeding edge when it comes to my production machines, and not be an unpaid beta tester, I do not recommend this setting unless you like being a beta tester.

  Microsoft has released the preview update for Windows 10 (KB5050081) and it includes “​​​​​​​New! You now have the new Outlook for Windows app. A new app icon appears in the Apps section on the Start menu, near classic Outlook. There are no changes to any settings or defaults. If you are an IT admin, learn how to manage this update at Control the installation and use of new Outlook.​​​​​​​”

  For Windows 11, KB5050094 has been released including some gradual rollout items and some regular rollout items.

  I do not recommend preview updates on machines unless you are in a beta-testing frame of mind.

  Windows Patches/Security KB5050081, KB5050094, Outlook, Patch Lady Posts

• Master patch listing for January 2025

  Posted on January 15, 2025 at 14:52 CST by Susan Bradley • Comment in the Forums

  I’ve updated the master patch list here.  It’s the first of the year and I have personally seen one issue whereby I atempted to install 2025-01 Security Update for Windows 10 22H2 KB5050411 along with the main security update and the .net update at the same time.  The first time it failed on error 0x80070643. Rescanned and it installed the second time. Confirmed in the forums by PK, and reports on the web seeing the same behavior.

  Please note I am not recommending installing updates at this time, we are just testing and reporting.

  I am keeping an eye on the other patches released this month. January was a HUGE release. I’m more concerned about business patchers than I am about consumers this month. I’m also honestly looking more forward to February’s release of the “new” Outlook and will be providing guidance on how to proactively deal with that (stay tuned, planning KB posts and video guidance).

  As always, thank you all for supporting the cause! Remember we use the “name your price” model where you can choose how much you will pay for a membership. Plus membership gives you full access, And if you donate $50 or more, you’ll get a special code to enable text messages sent to your phone each time the Master Patch List gets updated and when I change the MS-DEFCON level.

  More details about these updates in Monday’s newsletter.  You are missing out if you don’t sign up. All content is human made with our own blood, sweat, tears, fingers, and brain power — and it’s 100% AI free.  Therefore, if I’ve fat fingered any KB numbers or if you have any questions, as always post in the forums and I’ll follow up!

  Windows Patches/Security Master Patch List, Patch Lady Posts

• January 2025 patches get released

  Posted on January 14, 2025 at 12:25 CST by Susan Bradley • Comment in the Forums

  It’s the first of the year and the start of our ten month countdown to end of support (but not end of using) Windows 10. Today’s updates include the following:

  Windows 10 22H2 – KB5049981 – also includes an update to the Windows Kernel vulnerable driver blocklist.

  Windows 11 23H2 – KB5050021  – This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks.

  Windows 11 24H2 – KB5050009 As a reminder I am still not officially recommending using or installing 24H2. I know many of you have but I still have reservations for consumers, gaming platforms and some business uses.

  Citrix has documented issue, including a workaround which can be performed prior to installing the January 2025 Windows security update. For details, see Microsoft’s January Security Update Fails/Reverts on a machine with 2411 Session Recording Agent.

  Next steps: Microsoft is working with Citrix to address this issue and will update this documentation once a resolution is available.

  Just a reminder, I do not recommend installing updates at this time, we are now in test mode.

  For Apple, I do recommend installing iOS 18.2.1 released on January 6th.

  Windows Patches/Security Patch Lady Posts

• December 2024 Patch Listing

  Posted on December 12, 2024 at 09:32 CST by Susan Bradley • Comment in the Forums

  I’ve updated the master patch list here.  We’re closing out 2024 and I do not recommend that you install 24H2 at this time even though Microsoft has fixed the issues with Fujitsu scanners and some games.

  So far, I’m not seeing anything trending for consumers, but it’s too early right now.  I am seeing that once you install 18.2 on iPhones that they warm up a bit as a result of the indexing it appears to do after the phone reboots.

  There is a zero day (a vulnerability that has been seen in targeted attacks) in the news referred to as CVE-2024-49138, Windows Common Log File System Driver Elevation of Privilege Vulnerability, but given that the reporting organization is from CrowdStrike, it appears this is a targeted attack seen in businesses, not consumers. Bottom line don’t panic. I will let you know if I see a compelling reason to immediately patch. At this this time I do not recommend we change from our normal process to test before installing updates and to ensure there are no major side effects or issues.

  As always, thank you all for supporting the cause! Remember we use the “name your price” model where you can choose how much you will pay for a membership. Plus membership gives you full access, And if you donate $50 or more, you’ll get a special code to enable text messages sent to your phone each time the Master Patch List gets updated and when I change the MS-DEFCON level.

  More details about these updates in Monday’s newsletter.  You are missing out if you don’t sign up. All content is human made with our own blood, sweat, tears, fingers, and brain power — and it’s 100% AI free.  Therefore, if I’ve fat fingered any KB numbers or if you have any questions, as always post in the forums and I’ll follow up!

  Windows Patches/Security Master Patch List, Patch Lady Posts

• October 2024 Master patch list

  Posted on October 10, 2024 at 06:50 CDT by Susan Bradley • Comment in the Forums

  With Hurricane Milton still causing issues and just being too close to Patch Tuesday, once again I don’t recommend installing updates at this time.  I’ve updated the master patch list here.  Nor do I recommend that you install 24H2 at this time.

  So far, I’m not seeing anything trending for consumers, but it’s too early right now. For now, I’ll urge you to ensure your browser is up to date and your devices and phones, but to hold off on Microsoft updates.

  As always, thank you all for supporting the cause! Remember we use the “name your price” model where you can choose how much you will pay for  a membership . Plus membership gives you access and if you donate $50 or more you’ll get a special code to enable text messages sent to your phone each time the Master Patch List gets updated and when I change the MS-DEFCON level.

  More details about these updates in Monday’s newsletter.  You are missing out if you don’t sign up. All content is human made with our own blood, sweat, tears, fingers and brain power and 100% AI free.  Therefore, if I’ve fat fingered any KB numbers or if you have any questions, as always post in the forums and I’ll follow up!

  Windows Patches/Security Master Patch List, Patch Lady Posts
• « Older Entries